Plex Urges Password Resets Following Data Breach

Plex has disclosed that an unauthorized third party accessed a limited subset of customer data from one of its databases, including emails, usernames, securely hashed passwords, and authentication data. The company urged users with Plex accounts to reset their passwords immediately at plex[.]tv/reset, noting that enabling the “Sign out connected devices after password change” option will sign them out of all devices.

It also advised users relying on Single Sign-On to log out of all active sessions and check the box to sign out of all devices. Plex said it has blocked the attackers’ access and launched internal reviews to improve security, and it warned users to be wary of phishing attempts and impersonation. SecurityWeek notes that Plex did not state who was behind the attack or how many users were affected. The article, published on 9 September 2025, attributes the reporting to SecurityWeek and writer Ionut Arghire. According to SecurityWeek.